-
Notifications
You must be signed in to change notification settings - Fork 7
Prepare the Image
Rob Coward edited this page Oct 18, 2016
·
1 revision
The pfsense.yaml HEAT template has been written to make use of the Open Source pfSense firewall appliance that can be downloaded from https://www.pfsense.org/download/
The steps used to prepare the image for use were:
- Download the pre-installed nanobsd image:
wget https://frafiles.pfsense.org/mirror/downloads/pfSense-CE-2.3.2-RELEASE-4g-amd64-nanobsd-vga.img.gz
- Decompress the downloaded file and convert to a raw file:
gzip -dc pfSense-CE-2.3.2-RELEASE-4g-amd64-nanobsd-vga.img.gz | dd of=pfSense-CE-2.3.2.raw bs=1M
- Upload the raw file to create an image on OpenStack:
glance image-create --file ./pfSense-CE-2.3.2.raw --name "pfSense 2.3.2" --disk-format raw --min-disk 4 --min-ram 512 --container-format bare --progress
- Launch an instance from the "pfSense 2.3.2" image, attaching it to two networks.
- Using the console for the new instance, complete the configuration steps, specifying vtnet0 as the WAN interface and vtnet1 as the LAN interface.
- Using another VM on the LAN network, configure SSH port forwarding to relay http requests to the LAN interface of the pfSense VM. (See more details below.)
- Making use of pfSense's Web UI, make the following additional configuration changes:
- configure the LAN interface to use DHCP configuration.
- configure NTP to use: 0.uk.pool.ntp.org
- enable SSH access to the appliance
- set the admin user's password to: Password123#
- set the DNS server settings to: 8.8.8.8
- Reboot the VM to ensure it starts up cleanly.
- Snapshot the VM and then convert the snapshot to an image.